A now-patched security flaw in the Opera web browser could have enabled a malicious extension to gain unauthorized, full access to private APIs. The attack, codenamed CrossBarking, could have made… Read More »Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information
Navigating the complexities of compliance frameworks like ISO 27001, SOC 2, or GDPR can be daunting. Luckily, Intruder simplifies the process by helping you address the key vulnerability management criteria… Read More »Embarking on a Compliance Journey? Here’s How Intruder Can Help
Cybersecurity researchers have discovered a new malicious Python package that masquerades as a cryptocurrency trading tool but harbors functionality designed to steal sensitive data and drain assets from victims’ crypto… Read More »Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code
A little over three dozen security vulnerabilities have been disclosed in various open-source artificial intelligence (AI) and machine learning (ML) models, some of which could lead to remote code execution… Read More »Researchers Uncover Vulnerabilities in Open-Source AI and ML Models
The Dutch National Police, along with international partners, have announced the disruption of the infrastructure powering two information stealers tracked as RedLine and MetaStealer. The takedown, which took place on… Read More »Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus
Sherlock Holmes is famous for his incredible ability to sort through mounds of information; he removes the irrelevant and exposes the hidden truth. His philosophy is plain yet brilliant: “When… Read More »A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation
The U.S. government (USG) has issued new guidance governing the use of the Traffic Light Protocol (TLP) to handle the threat intelligence information shared between the private sector, individual researchers,… Read More »U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing
More than six years after the Spectre security flaw impacting modern CPU processors came to light, new research has found that the latest AMD and Intel processors are still susceptible… Read More »New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors
A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset… Read More »Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services
Three malicious packages published to the npm registry in September 2024 have been found to contain a known malware called BeaverTail, a JavaScript downloader and information stealer linked to an… Read More »BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers